Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Is there a way to export Policy data?

JohnDoe
Regular Contributor
Regular Contributor

Hello.

I would like to ask, is it possible to export the Policy(Technical Rule or User Update Rule) that I created as a file?

I created the Policy in the validation environment, and there are about 100 of them, which is huge.
I want to use them in the production environment, so I want to extract the Policy data to shorten the same work.
The data I want to extract is all about Policy, including the contents of Advance Config of Condition.

But it turns out that Policy is not covered by Transport.
Is there a good way to solve this problem?

Thank you and best regards,

5 REPLIES 5

rushikeshvartak
All-Star
All-Star
SELECT h.hanarulekey     AS RuleKey,
       h.name            AS RuleName,
       h.ruledescription AS RuleDescription,
       CASE
         WHEN h.type = 1 THEN 'Technical'
         WHEN h.type = 2 THEN 'User Update'
       end               AS RuleType,
       CASE
         WHEN h.birthright = 1 THEN 'Checked'
         ELSE ''
       end               AS Birthright,
       CASE
         WHEN h.removebirthrightonfail = 1 THEN 'Checked'
         ELSE ''
       end               AS RemoveBirthRightOnFail,
       CASE
         WHEN h.invokebydetectivejob = 1 THEN 'Checked'
         ELSE ''
       end               AS InvokeByDetectiveJob,
       CASE
         WHEN h.eventsource = 5 THEN 'User Updated via Import'
         WHEN h.eventsource = 6 THEN 'User Updated via API'
         WHEN h.eventsource = 4 THEN 'User Updated via UI'
         WHEN h.eventsource = 1 THEN 'User Created via UI'
         ELSE h.eventsource
       end               AS InvokeByDetectiveJob,
       CASE
         WHEN h.status = 1 THEN 'In-Active'
         ELSE 'Active'
       end               AS Statuss,
       h.advancedquery,
       CASE
         WHEN ha.objectname = 3 THEN 'Re-Run Provisioning Rules'
         WHEN ha.objectname = 7 THEN 'Enable Account'
         WHEN ha.objectname =- 999 THEN 'Create Account'
         WHEN ha.objectname = 19 THEN 'Update Account'
         WHEN ha.objectname = 12 THEN 'Disable Account'
         WHEN ha.objectname = 9 THEN 'Update User'
         WHEN ha.objectname = 21 THEN 'Re-Run Selected Technical Rule'
         WHEN ha.objectname = 20 THEN 'Generate User Email'
         ELSE ha.objectname
       end               AS EntitlementNameOrAction,
       CASE
         WHEN ha.objecttype LIKE '%EP%' THEN (SELECT endpointname
                                              FROM   endpoints
                                              WHERE
         Concat('EP_', endpointkey) = ha.objecttype)
         WHEN ha.objecttype REGEXP '[0-9]' THEN (SELECT entitlementname
                                                 FROM   entitlement_types
                                                 WHERE
         entitlementtypekey = ha.objecttype)
         ELSE ha.objecttype
       end               AS EntitlementTypeOrEndpoint,
       CASE
         WHEN ha.objectvalue NOT LIKE '%,%'
              AND ha.objectname != 9 THEN (SELECT endpointname
                                           FROM   endpoints
                                           WHERE  endpointkey = ha.objectvalue)
         WHEN ha.objectvalue LIKE '333,323,175' THEN (SELECT
         Group_concat(endpointname SEPARATOR ',')
                                                      FROM   endpoints
                                                      WHERE  endpointkey IN (
                                                             333, 323, 175 ))
         WHEN ha.objectvalue LIKE '323,175' THEN (SELECT
         Group_concat(endpointname SEPARATOR ',')
                                                  FROM   endpoints
                                                  WHERE
         endpointkey IN ( 323, 175 ))
         WHEN ha.objectvalue LIKE '264,325,290,263' THEN (SELECT
         Group_concat(endpointname SEPARATOR ',')
                                                          FROM   endpoints
                                                          WHERE
         endpointkey IN ( 264, 325, 290, 263 ))
         WHEN ha.objectvalue NOT LIKE '%,%'
              AND ha.objectname = 9 THEN (SELECT connectionname
                                          FROM   externalconnection
                                          WHERE  externalconnectionkey =
                                         ha.objectvalue)
         WHEN ha.objectvalue IS NULL THEN ''
         ELSE ha.objectvalue
       end               AS Endpoint
FROM   hanarule h,
       hanaruleattribute ha
WHERE  h.hanarulekey = ha.hanarule
       AND ha.conditionoraction = 'ACTN'
ORDER  BY hanarulekey 

Use below query

S


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Thank you for your reply.

There is a rule that sets the Condition by pull-down method instead of Advance Query, so is it possible to display the contents of the such Condition?

Screenshot of sample rule


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

For example, we have these technical rules.
I want to extract the contents of the red box, too.

JohnDoe_0-1692938351448.png

 

Thats there in query u can modify , it will be complex query but doable


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.